EllenDoc Privacy Policy

Transparency about how EllenDoc protects your documents and respects your choices.

Responsible: CliniqAI Software and Marketing Ltda
Privacy Contact: suporte@cliniqai.net
Last update and validity: August 23, 2026

Summary: EllenDoc does not create an account and its audited core does not depend on its own backend. It processes data locally, but there are user-initiated outputs and third-party components described below.

1. Purpose and scope

EllenDoc is a Android application for viewing, organizing, scanning and protecting documents. This policy distinguishes the processing carried out on the device, deliberate deliveries to other applications, backup by a chosen provider, the Google Play Services scanner and the technical records of this website.

2. Data processed locally

files selected, imported, viewed and saved;
names, types, URIs granted by Android, size, dates and history of recent documents;
text extracted from compatible formats, fingerprints, snippets and local search index;
images and PDFs created by the scanner;
Vault documents, divisions and metadata;
PIN in Android authentication flows and biometric authentication result;
P12/PFX certificates, metadata and, when configured, password protected by secure storage;
local preferences and settings.

The app does not receive your biometric model. Common files and the search index outside of Vault should not be understood as protected by the same cipher layer as Vault.

3. Vault and backup

The Vault keeps documents encrypted and uses local PIN and optional biometrics. The PIN is not sent to server EllenDoc. For backup, you set a separate recovery password and choose a folder by the official Android selector. The package is encrypted before being delivered to the DocumentsProvider. Two generations can be retained when retention is complete.

If the folder is in the Google Drive, account, authentication, and synchronization are operated by the Google Drive provider. EllenDoc does not receive a password or OAuth token from your Google Account. Checking by size and SHA-256 does not prove that remote synchronization is complete.

4. Share, print and save

When you share, print, or save a copy, the content is delivered to your chosen application, service, or folder. From there, the destination controls the copy and enforces its own policy. Sharing or printing from Vault requires making the decrypted content available to the chosen destination.

5. Scanner and Google Play Services

The scanner uses Google ML Kit Document Scanner through Google Play Services. EllenDoc does not directly request camera permission in the audited manifest. The Google component may need to be installed or updated and is subject to Google Play Services practices. Consult the Google Privacy Policy.

6. Permissions Android

In the current audited configuration, vibration, biometrics/fingerprint, capture detection/protection when applicable and AndroidX/WorkManager operational permissions, such as job execution and rescheduling after reboot, appear. No INTERNET, camera or broad media/storage access was observed in the audited engineering artifact. The final AAB must be re-evaluated before publication.

7. Analytics, ads and account

No account EllenDoc, ads, Firebase Analytics, Crashlytics, Sentry or conventional analytics SDK were identified in the audited state. These declarations will be revalidated in the final AAB.

8. Retention and deletion

Local data remains as long as necessary for functionality or until removed, wiped from storage, or uninstalled. The app's Android Auto Backup is disabled. Temporaries are cleaned on a best effort basis; Flash storage does not allow for unrecoverable physical erasure promise.

Disabling backup or uninstalling does not necessarily delete packages already present on the provider. Delete them manually in the chosen folder. Consult complete instructions.

9. Rights and requests

You can request information about treatments under the control of the person responsible and exercise applicable rights provided for in LGPD via the privacy email. As EllenDoc does not maintain an account or document backend, the company may not have the documents processed only on the device. Never send a document, PIN, password or certificate to exercise a right.

10. Privacy of this website

The site does not use non-essential cookies, analytics, pixels, external sources or forms. The server can record IP, date, URL, HTTP status and user-agent in technical logs for operation and security. These records do not include the content of application documents.

11. Changes

Material changes will be published on this page with a fixed update date. When required, consent will be sought or additional notice provided.